<!doctype html>
<img src="http://localhost:8080/security/resources/cors-image.php?max-age=60" crossorigin
     onload="parent.postMessage('FAIL', '*')"
     onerror="parent.postMessage('PASS', '*')">
